[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Simple Authentication



On Mon, 8 Dec 2003, Les Halliday wrote:

> Hi everyone,
>
> I am using SuSE 8.2 to try and achieve simple authentication against
> novell edirectory. getent passwd or getent group only displays
> information from local files. ldapsearch -x 'uid=linux29' returns the
> correct information stored in edirectory. Entering a edirectory username
> but wrong password results in the following in /var/log/messages:-
>
> Dec  8 10:04:31 linux29 login[2063]: pam_unix2: pam_sm_authenticate()
> called
> Dec  8 10:04:37 linux29 login[2063]: pam_ldap: error trying to bind as
> user "cn=Linux29,ou=SER,ou=KLK,o=EK" (Invalid credenti
> als)
> Dec  8 10:04:37 linux29 login[2063]: pam_unix2: pam_ldap returned 7
> Dec  8 10:04:37 linux29 login[2063]: pam_unix2: username=[linux29]
> Dec  8 10:04:37 linux29 login[2063]: pam_unix2: pw == NULL, return
> PAM_USER_UNKNOWN
> Dec  8 10:04:43 linux29 login[2063]: pam_ldap: error trying to bind as
> user "cn=Linux29,ou=SER,ou=KLK,o=EK" (Invalid credenti
> als)
> Dec  8 10:04:43 linux29 login[2063]: FAILED LOGIN 1 FROM /dev/tty4 FOR
> UNKNOWN, Authentication failure
> Dec  8 10:04:47 linux29 login[2063]: pam_unix2: pam_sm_authenticate()
> called
>
> A correct username and password returns:-
>
> Dec  8 10:07:15 linux29 login[2115]: pam_unix2: pam_sm_authenticate()
> called
> Dec  8 10:07:18 linux29 login[2115]: pam_unix2: pam_ldap returned 0
> Dec  8 10:07:18 linux29 login[2115]: pam_unix2: pam_sm_acct_mgmt()
> called
> Dec  8 10:07:18 linux29 login[2115]: pam_unix2: pam_ldap returned 0
> Dec  8 10:07:18 linux29 login[2115]: Failed to look up user 'linux29'.
>

It seems that a correct username and password authenticates well and the
error is with the account management, is the account healthy?

You can check the configuration of pam_unix2.so too:
/etc/security/pam_unix2.conf

And... why pam_unix2 is calling pam_ldap? Does pam_unix2 have ldap
facilities?

              __
   _ __ __ _ / _| __ _
  | '__/ _` | |_ / _` |
  | | | (_| |  _| (_| |
  |_|   __ _|_|   __ _|

  Rafa Forcada Martínez
mailto:rforcada join-es com

   JOvenes INformáticos
  http://www.join-es.com




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]